Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\svchostsw.exe
- %TEMP%\s.bat
- %TEMP%\<File name>.exe.pid
- 'co#####xunderwear.shop':80
- http://17#.##1.14.125:8888/bots/knock?wo######################################
- http://co###ob-shop.de/[asdomain]2019.zip
- http://co######tasonlineshop.com/[asdomain]2019.zip
- http://co#####lignashop.com/[asdomain]2019.zip
- http://co####de-shop.de/[asdomain]2019.zip
- http://co####orkshop.es/[asdomain]2019.zip
- http://co####ledcarry.shop/[asdomain]2019.zip
- http://co##ex.shop/[asdomain]2019.zip
- http://co####lershop.com/[asdomain]2019.zip
- http://co###leshop.com/[asdomain]2019.zip
- http://co###o-shop.com/[asdomain]2019.zip
- http://co###pcion.shop/[asdomain]2019.zip
- http://co#####rated-shops.com/[asdomain]2019.zip
- http://co###shop.de/missing.html
- http://co######bau-partner.shop/[asdomain]2019.zip
- http://co##shop.de/[asdomain]2019.zip
- http://co######arshipworkshop.com/[asdomain]2019.zip
- http://co###istas.shop/[asdomain]2019.zip
- http://co###c-shop.de/[asdomain]2019.zip
- http://co####orkshop.com/[asdomain]2019.zip
- http://co###ex.shop/[asdomain]2019.zip
- http://co###reshop.com/[asdomain]2019.zip
- http://co#####usculashop.com/[asdomain]2019.zip
- http://co###yco.shop/[asdomain]2019.zip
- http://co###ndas.shop/[asdomain]2019.zip
- http://co###ll.shop/[asdomain]2019.zip
- http://co###pt-shop.de/[asdomain]2019.zip
- http://co###op24.com/[asdomain]2019.zip
- http://co####mashop.com/[asdomain]2019.zip
- http://co###xia.com/[asdomain]2019.zip
- http://co###cshop.com/[asdomain]2019.zip
- http://co###rkshop.com/[asdomain]2019.zip
- http://co#####fsoccershop.com/[asdomain]2019.zip
- http://co##hop.eu/[asdomain]2019.zip
- http://co###orkshop.ru/[asdomain]2019.zip
- http://co####tyshop.com/[asdomain]2019.zip
- http://co###neshop.com/[asdomain]2019.zip
- http://co####app-shop.com/[asdomain]2019.zip
- http://co####tishop.co.uk/[asdomain]2019.zip
- http://co###net.shop/[asdomain]2019.zip
- http://co###tashop.ru/[asdomain]2019.zip
- http://co#####istanbul.shop/[asdomain]2019.zip
- http://co####ti-shop.com/[asdomain]2019.zip
- http://co####ti-chick.shop/[asdomain]2019.zip
- http://co######esignworkshop.com/[asdomain]2019.zip
- http://co####ti-shop.de/[asdomain]2019.zip
- http://co####t-rail.shop/[asdomain]2019.zip
- http://www.co##ol.ag/add-ons/%5basdomain%5d2019.zip
- http://co####ti-world.com/[asdomain]2019.zip
- http://www.co####mashop.com/[asdomain]2019.zip
- http://co####tichic.shop/[asdomain]2019.zip
- http://co###tti.shop/[asdomain]2019.zip
- http://co####tishop.com/[asdomain]2019.zip
- http://co####tcom-shop.fr/[asdomain]2019.zip
- http://co#####bikeshop.com.br/[asdomain]2019.zip
- http://co######arkengetraenke.shop/[asdomain]2019.zip
- http://co#####home-shop.com/[asdomain]2019.zip
- http://co####e-design.com/[asdomain]2019.zip
- http://co###onic.shop/asdomain2019.zip
- http://co########rkengetraenke-shop.com/[asdomain]2019.zip
- http://co###opping.vn/[asdomain]2019.zip
- http://co####t-coach.shop/[asdomain]2019.zip
- http://P6#####8.profiseller.de/[asdomain]2019.zip
- http://co####t-rails.shop/[asdomain]2019.zip
- http://co#####-beaute-shop.com/[asdomain]2019.zip
- http://co####lmentshop.com/[asdomain]2019.zip
- http://co###icare.shop/[asdomain]2019.zip
- http://www.co###rld.shop/%5basdomain%5d2019.zip
- http://co###al.shop/[asdomain]2019.zip
- http://co###nt.shop/[asdomain]2019.zip
- http://co####tbrands.shop/[asdomain]2019.zip
- http://co###teshop.es/
- http://www.co###ise.biz/%5basdomain%5d2019.zip
- http://co#####brandshop.com/[asdomain]2019.zip
- http://co#######arkengetraenke.shop/[asdomain]2019.zip
- http://www.co###op24.at/
- http://co####ti-world.se/[asdomain]2019.zip
- http://co###ello.shop/[asdomain]2019.zip
- http://co###ise.shop/[asdomain]2019.zip
- http://co##hop.no/[asdomain]2019.zip
- http://co###toshop.com/[asdomain]2019.zip
- http://co##hop.bg/[asdomain]2019.zip
- http://co##hop.tv/[asdomain]2019.zip
- http://co##hop.ru/[asdomain]2019.zip
- http://co###op.com.pt/[asdomain]2019.zip
- http://co###cshop.eu/[asdomain]2019.zip
- http://co###op2000.com/[asdomain]2019.zip
- http://co###opko.com/[asdomain]2019.zip
- http://co###rld.shop/[asdomain]2019.zip
- http://co###opify.com/[asdomain]2019.zip
- http://co###op.info/[asdomain]2019.zip
- http://co####pdev.co.uk/[asdomain]2019.zip
- http://co###op24.at/[asdomain]2019.zip
- http://co###op.co.uk/[asdomain]2019.zip
- http://co##hop.net/[asdomain]2019.zip
- http://co#####-schwarmstedt.de/[asdomain]2019.zip
- http://co##hop.at/[asdomain]2019.zip
- http://co####odoshop.com/[asdomain]2019.zip
- http://17#.##1.14.125:8888/bots/chkVersion?cu####################
- http://17#.##1.14.125:8888/gw?wo#####################
- http://17#.##1.14.125:8888/gw?wo#####
- http://co####ingshop.com/[asdomain]2019.zip
- http://co#####ngworkshop.org/[asdomain]2019.zip
- http://co###shop.de/[asdomain]2019.zip
- http://co###shop.com/[asdomain]2019.zip
- http://co###op24.eu/[asdomain]2019.zip
- http://co###-shop.de/[asdomain]2019.zip
- http://co#####sbarbershop.com/[asdomain]2019.zip
- http://co###op-24.net/[asdomain]2019.zip
- http://co###cshop.net/[asdomain]2019.zip
- http://co####p-kerski.de/[asdomain]2019.zip
- http://co#####-schneider.de/[asdomain]2019.zip
- http://co####p-online.de/[asdomain]2019.zip
- http://17#.##1.14.125:8888/project/active
- http://co###cshop.info/[asdomain]2019.zip
- http://co##ar.shop/[asdomain]2019.zip
- http://co###hop.com/[asdomain]2019.zip
- http://co###oppen.com/[asdomain]2019.zip
- http://co####shop24.net/[asdomain]2019.zip
- http://co###cshop24.de/[asdomain]2019.zip
- http://co#####st-workshop.com/[asdomain]2019.zip
- http://co###leshop.de/[asdomain]2019.zip
- http://co####ronic-shop.de/[asdomain]2019.zip
- http://co####istshop.com/[asdomain]2019.zip
- http://co###opper.com/[asdomain]2019.zip
- http://co###l-shop.ru/[asdomain]2019.zip
- http://co####de4you.shop/[asdomain]2019.zip
- http://co####pping.co.kr/[asdomain]2019.zip
- http://co###ade.shop/[asdomain]2019.zip
- http://co###onic.shop/[asdomain]2019.zip
- http://co###kkshop.de/[asdomain]2019.zip
- http://co###i-shop.de/[asdomain]2019.zip
- http://co###c-shop.sk/[asdomain]2019.zip
- http://co###cshop.de/[asdomain]2019.zip
- http://co##hop.com/[asdomain]2019.zip
- http://co###topia.shop/[asdomain]2019.zip
- http://co###teshop.com/[asdomain]2019.zip
- http://co##hop.us/[asdomain]2019.zip
- http://co####ptest.co.uk/[asdomain]2019.zip
- http://co#####support.co.uk/[asdomain]2019.zip
- http://co###l-shop.de/[asdomain]2019.zip
- http://co###opco.com/[asdomain]2019.zip
- http://co###opping.com/[asdomain]2019.zip
- http://co##rt.shop/[asdomain]2019.zip
- http://co###shop.eu/[asdomain]2019.zip
- http://co###op.co.jp/[asdomain]2019.zip
- http://co###opmall.com/[asdomain]2019.zip
- http://co###oppin.com/[asdomain]2019.zip
- http://co####pplaywin.com/[asdomain]2019.zip
- http://co####oy-shop.ru/[asdomain]2019.zip
- http://co###ops.com/[asdomain]2019.zip
- http://co####-webshop.de/[asdomain]2019.zip
- http://co####ponline.net/[asdomain]2019.zip
- http://co####ponline.com/[asdomain]2019.zip
- http://co###ttishop.de/[asdomain]2019.zip
- DNS ASK co####ingshop.com
- DNS ASK co###teshop.es
- DNS ASK co#####brandshop.com
- DNS ASK co####tbrands.shop
- DNS ASK co####tbox-shop.fr
- DNS ASK co#####boardshop.com
- DNS ASK co#####bikeshop.com.br
- DNS ASK co###pt11.shop
- DNS ASK co#####artworkshops.com
- DNS ASK co######rtworkshops.co.uk
- DNS ASK co######rtworkshop.co.uk
- DNS ASK co####tartshop.com
- DNS ASK co###pta.shop
- DNS ASK co####ta-shop.de
- DNS ASK co######rudergerateshop.de
- DNS ASK co#####2creation.shop
- DNS ASK co####t.shopping
- DNS ASK co#####-workshop.com
- DNS ASK co####t-wohnen.shop
- DNS ASK co#####-wohnen-shop.de
- DNS ASK co####t-webshop.com
- DNS ASK co####t-souk.shop
- DNS ASK co#######nsofashopaholic.net
- DNS ASK co###pt-shop.ru
- DNS ASK co####t-shop.net
- DNS ASK co#####closetshop.com
- DNS ASK co###ise.biz
- DNS ASK co######arkengetraenke.shop
- DNS ASK co###.#undenwebshop.de
- DNS ASK co####tkiosk.shop
- DNS ASK co#####istanbul.shop
- DNS ASK co####tionshop.com
- DNS ASK co#####home-shop.com
- DNS ASK co#####gruppe-shop.com
- DNS ASK co#####gastro-shop.de
- DNS ASK co######ashionwebshop.be
- DNS ASK co###pteshop.uk
- DNS ASK co####teshop.co.uk
- DNS ASK co######esignworkshops.com
- DNS ASK co######esignworkshop.com
- DNS ASK co####tcrate.shop
- DNS ASK co####tcraft.shop
- DNS ASK co###r-shop.de
- DNS ASK co######ontinuumshop.com
- DNS ASK mo########modum-as.business.site
- DNS ASK co#####concrete.shop
- DNS ASK co####tcom-shop.fr
- DNS ASK co#####chromosome.shop
- DNS ASK co###ob-shop.de
- DNS ASK co######ar-stuttgart.shop
- DNS ASK co#####edclothing.shop
- DNS ASK co###alshop.com
- DNS ASK co######entfurniture.shop
- DNS ASK co####lershop.com
- DNS ASK co###aler.shop
- DNS ASK co###ryshop.com
- DNS ASK co####de-shop.de
- DNS ASK co#####edcarryshop.com
- DNS ASK co######dcarrypurses.shop
- DNS ASK co###op24.com
- DNS ASK co######tasonlineshop.com
- DNS ASK co####app-shop.com
- DNS ASK co######dcarrypurse.shop
- DNS ASK co####yshopping.com
- DNS ASK co#####pizzashop.com
- DNS ASK co#####burgershop.com
- DNS ASK co##ir.shop
- DNS ASK co##.shop
- DNS ASK co##shop.de
- DNS ASK co#.shop
- DNS ASK co###aycon.shop
- DNS ASK co####ledcarry.shop
- DNS ASK co##ol.ag
- DNS ASK co##ri.de
- DNS ASK co###pt-shop.eu
- DNS ASK co###nt.shop
- DNS ASK co#####withkaila.shop
- DNS ASK P6#####8.profiseller.de
- DNS ASK co###pt-shop.de
- DNS ASK co####t-rails.shop
- DNS ASK co####t-rail.shop
- DNS ASK co####t-mode.shop
- DNS ASK co#######arkengetraenke.shop
- DNS ASK co########rkengetraenke-shop.com
- DNS ASK co#####-gruppe-shop.com
- DNS ASK co####t-coach.shop
- DNS ASK co#####-beaute-shop.com
- DNS ASK co######bau-partner.shop
- DNS ASK co###pt-43.shop
- DNS ASK co####trashop.com
- DNS ASK co####lmentshop.com
- DNS ASK co###pcion.shop
- DNS ASK co#######tionconcealment.shop
- DNS ASK co####tration.shop
- DNS ASK co####trateshop.com
- DNS ASK co######atedsoapshop.com
- DNS ASK co#####rated-shops.com
- DNS ASK co###ito.shop
- DNS ASK co###al.shop
- DNS ASK co#####ionsworkshop.com
- DNS ASK co###ttishop.de
- DNS ASK co###do.shop
- DNS ASK co####enzeshop.com
- DNS ASK co#####ntshopping.com
- DNS ASK co#####ntshopper.com
- DNS ASK co####entshop.com
- DNS ASK co#####ntlifeshop.com
- DNS ASK co#####ntialshopper.com
- DNS ASK co#####ntialshop.com
- DNS ASK co#####ntialrush.shop
- DNS ASK ww#.###shopplaywin.com
- DNS ASK ww##.####cholarshipworkshop.com
- DNS ASK co#######forshopping.computer
- DNS ASK co######tforshopping.com
- DNS ASK co#######expectationshop.com
- DNS ASK co#######actionworkshops.com
- DNS ASK ww#.##mshopko.com
- DNS ASK co###dent.shop
- DNS ASK co#######eworkshopslondon.com
- DNS ASK co#####nceworkshops.com
- DNS ASK co####enceshop.org
- DNS ASK co####enceshop.com
- DNS ASK co######ceinshopping.co.uk
- DNS ASK co######ceinshopping.com
- DNS ASK co###gshop.nl
- DNS ASK co###ne.shop
- DNS ASK co########otographyworkshops.com
- DNS ASK co#######anagementworkshops.com
- DNS ASK co###ict.shop
- DNS ASK co###tures.shop
- DNS ASK co###ture.shop
- DNS ASK co#####xunderwear.shop
- DNS ASK co###tex.shop
- DNS ASK co####erieshop.de
- DNS ASK co####erie-shop.ch
- DNS ASK co####erie-bauer.de
- DNS ASK co####medshop.com
- DNS ASK co###leshop.de
- DNS ASK co###rmed.shop
- DNS ASK co####med-user.shop
- DNS ASK co#####ed-infos.shop
- DNS ASK co#####ationshop.com
- DNS ASK co#######iongiftshopping.com
- DNS ASK co####m-user.shop
- DNS ASK eb###tores.de
- DNS ASK co#####-myshopify.com
- DNS ASK co####m-login.shop
- DNS ASK co#####-account.shop
- DNS ASK co####ti-chick.shop
- DNS ASK co###tashop.ru
- DNS ASK co######cebarbershop.com
- DNS ASK co######cecoffeeshop.com
- DNS ASK co####tishop.co.uk
- DNS ASK co###ttishop.be
- DNS ASK co#####ishooters.shop
- DNS ASK co###ttis.shop
- DNS ASK co#####ipartyshop.com
- DNS ASK co######monogramshop.com
- DNS ASK co#####iclubshop.com
- DNS ASK co#####iclubshop.co.uk
- DNS ASK co####tichic.shop
- DNS ASK co######cakesbakeshop.com
- DNS ASK DN##ore.com
- DNS ASK co#####iballoonshop.com
- DNS ASK co#######ndsparklepartyshop.com
- DNS ASK do####renter.com
- DNS ASK co###tti.shop
- DNS ASK co####ti-world.se
- DNS ASK co####ti-world.com
- DNS ASK co####ti-shop.eu
- DNS ASK co####ti-shop.de
- DNS ASK co####ti-shop.com
- DNS ASK co####tishop.com
- DNS ASK co####encecuts.shop
- DNS ASK co###ttishop.eu
- DNS ASK co####tishop.net
- DNS ASK co###ttishop.nl
- DNS ASK co###dence.shop
- DNS ASK co######ce-workshop.co.uk
- DNS ASK co###dant.shop
- DNS ASK co###can.shop
- DNS ASK co####nzawebshop.es
- DNS ASK co#####zawebshop.com
- DNS ASK co####nceshop.com
- DNS ASK co###ance.shop
- DNS ASK co###able.shop
- DNS ASK co#####iworkshop.com
- DNS ASK co####tiwebshop.com
- DNS ASK ma######ce.comtecshop24.net
- DNS ASK co####tishops.com
- DNS ASK co#####ishopping.com
- DNS ASK df####b1.onamae.com
- DNS ASK co####tishoppe.com
- DNS ASK co####ledcarry.com
- DNS ASK co####tishop24.eu
- DNS ASK co####tishop24.com
- DNS ASK co###ttishop.uk
- DNS ASK co######ceautoworkshop.com
- DNS ASK co###veshop.com
- DNS ASK co###usto.shop
- DNS ASK co###ube.shop
- DNS ASK co##hop.tv
- DNS ASK co##hop.ru
- DNS ASK co###op.online
- DNS ASK co##hop.no
- DNS ASK co##hop.net
- DNS ASK co###op.info
- DNS ASK co##hop.in
- DNS ASK co##hop.fr
- DNS ASK co##hop.eu
- DNS ASK co###op.com.pt
- DNS ASK co##hop.com
- DNS ASK co###op.co.uk
- DNS ASK co##hop.biz
- DNS ASK co###op.co.jp
- DNS ASK co##hop.bg
- DNS ASK co##hop.at
- DNS ASK co#####-schwarmstedt.de
- DNS ASK co#####-schneider.de
- DNS ASK co####p-online.de
- DNS ASK co###op-one.de
- DNS ASK co##hop.xyz
- DNS ASK co###op-one.com
- DNS ASK co###ops.com
- DNS ASK co####p-kerski.de
- DNS ASK co####pplaywin.com
- DNS ASK co###opping.vn
- DNS ASK co###opping.com
- DNS ASK co####pping.co.kr
- DNS ASK co###oppin.com
- DNS ASK co###opper.com
- DNS ASK co###oppen.com
- DNS ASK co##rt.shop
- DNS ASK co###oppe.com
- DNS ASK co####ponline.net
- DNS ASK co####ponline.com
- DNS ASK co###opone.com
- DNS ASK co###opmall.com
- DNS ASK co###opko.com
- DNS ASK co###opify.com
- DNS ASK co###opent.com
- DNS ASK co####pdev.co.uk
- DNS ASK co####pcom.online
- DNS ASK co###opco.com
- DNS ASK co###op24.eu
- DNS ASK co###op24.at
- DNS ASK co###op10.com
- DNS ASK co###op1.com
- DNS ASK co###op2000.com
- DNS ASK co###op-24.net
- DNS ASK co###orkshop.ru
- DNS ASK co####orkshop.es
- DNS ASK co####orkshop.de
- DNS ASK co####orkshop.com
- DNS ASK co###ty.shop
- DNS ASK co###tta.shop
- DNS ASK co###tshop.com
- DNS ASK co#####ostcardbook.shop
- DNS ASK co####ronium.shop
- DNS ASK co####ronic-shop.de
- DNS ASK co###toshop.com
- DNS ASK co###topia.shop
- DNS ASK co####odoshop.com
- DNS ASK co###to.shop
- DNS ASK co###tix.shop
- DNS ASK co#####ngworkshop.org
- DNS ASK co#####ngworkshop.net
- DNS ASK co#####ngworkshop.info
- DNS ASK co#####ngworkshop.biz
- DNS ASK co#####ngtoolshop.com
- DNS ASK co#####ngshopper.com
- DNS ASK co###zone.shop
- DNS ASK co#####-corporate.de
- DNS ASK co###opsteal.us
- DNS ASK co###xia.com
- DNS ASK co####enshop.com
- DNS ASK co###cshop.net
- DNS ASK co###cshop.info
- DNS ASK co###cshop.eu
- DNS ASK co###cshop.com
- DNS ASK co######arshipworkshop.com
- DNS ASK co###tec.shop
- DNS ASK co##at.shop
- DNS ASK co###-xem.shop
- DNS ASK co###-shop.de
- DNS ASK co###-eth.shop
- DNS ASK co###shop.com
- DNS ASK co####flyshop.com
- DNS ASK co##se.shop
- DNS ASK co#####sbarbershop.com
- DNS ASK co###de.shop
- DNS ASK co####e-design.com
- DNS ASK co##ad.shop
- DNS ASK co###shop.eu
- DNS ASK co###shop.es
- DNS ASK co###shop.de
- DNS ASK co####oneshop.com
- DNS ASK co###eb.shop
- DNS ASK co##hop.us
- DNS ASK co#####support.co.uk
- DNS ASK co##vi.shop
- DNS ASK co####llo-shop.ru
- DNS ASK co##v.shop
- DNS ASK co####rshop.co.uk
- DNS ASK co####rbikeshop.com
- DNS ASK co####bikeshop.com
- DNS ASK co###hop.top
- DNS ASK co###yco.shop
- DNS ASK co####tyshop.com
- DNS ASK co###istas.shop
- DNS ASK co####shopping.com
- DNS ASK co###us.shop
- DNS ASK co##to.shop
- DNS ASK co###ishop.com
- DNS ASK co###o-shop.com
- DNS ASK co###iones.shop
- DNS ASK co###ex.shop
- DNS ASK co####cazione.shop
- DNS ASK co###icare.shop
- DNS ASK co###ica.shop
- DNS ASK co####mosciano.shop
- DNS ASK co###ello.shop
- DNS ASK co####noshippo.com
- DNS ASK co#####usculashop.com
- DNS ASK co###uzu.shop
- DNS ASK co###ndas.shop
- DNS ASK co####a-shop.com
- DNS ASK co###net.shop
- DNS ASK co###hopify.com
- DNS ASK co###ushop.fr
- DNS ASK co###ushop.com
- DNS ASK co####mashop.com
- DNS ASK co##ar.shop
- DNS ASK co###pshop.com
- DNS ASK co#####lignashop.com
- DNS ASK co###rld.shop
- DNS ASK co###rkshop.com
- DNS ASK co######nspastryshop.com
- DNS ASK co##ip.shop
- DNS ASK co#####fsoccershop.com
- DNS ASK co####afshop.com
- DNS ASK co##########aighttohellandcrashandburn.shop
- DNS ASK co###llshop.dk
- DNS ASK co###ll.shop
- DNS ASK co###tashop.de
- DNS ASK co###tashop.com
- DNS ASK co###ta-shop.de
- DNS ASK co###neshop.com
- DNS ASK co###ikari.shop
- DNS ASK co###amark.shop
- DNS ASK co####ptest.co.uk
- DNS ASK co####-webshop.de
- DNS ASK co###c-shop.sk
- DNS ASK co###teshop.com
- DNS ASK co###c-shop.de
- DNS ASK co###ctshop.com
- DNS ASK co###eshop.com
- DNS ASK co###reshop.com
- DNS ASK co####oy-shop.ru
- DNS ASK co####yminicar.shop
- DNS ASK co####ydoll.shop
- DNS ASK co###oydol.shop
- DNS ASK co###oy.shop
- DNS ASK co#####kprintshop.com
- DNS ASK co######parkbodyshop.com
- DNS ASK co#####kcarshops.com
- DNS ASK co###ace.shop
- DNS ASK co##ol.shop
- DNS ASK co####-shops.org
- DNS ASK co####-shops.com
- DNS ASK co###l-shop.de
- DNS ASK co####istshop.com
- DNS ASK co#####-shopping.com
- DNS ASK co#####st-workshop.com
- DNS ASK co####h-shopping.de
- DNS ASK co####hikari.shop
- DNS ASK co###chnow.shop
- DNS ASK co##fa.shop
- DNS ASK co###ua.shop
- DNS ASK co###onic.shop
- DNS ASK co###i-shop.de
- DNS ASK co###adeshop.ba
- DNS ASK co####de4you.shop
- DNS ASK co###ade.shop
- DNS ASK co###ise.shop
- DNS ASK co###is.shop
- DNS ASK co####mshopping.com
- DNS ASK co#######esolutionworkshops.com
- DNS ASK co###leshop.com
- DNS ASK co###hopx.gq
- DNS ASK co###l-shop.ru
- DNS ASK co###l-shop.ch
- DNS ASK co###hop.com
- DNS ASK co###kkshop.de
- DNS ASK co####shop24.net
- DNS ASK co###cshop24.de
- DNS ASK co###cshop.de
- DNS ASK co###chshop.com
- DNS ASK co##ex.shop
- DNS ASK co####ctshop.com
- '%WINDIR%\syswow64\cmd.exe' /Q /C <LS_APPDATA>\Temp/s.bat' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /Q /C <LS_APPDATA>\Temp/s.bat